Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/4e7JJePgzdo64gFc6b8ucybUGhA.roa
File: 4e7JJePgzdo64gFc6b8ucybUGhA.roa (raw, json)
Hash identifier: YcFmwj+IiQ5D5CTxx4b1mBGQO5Q2E+/NPwLQ7FMn/B4=
Subject key identifier: E1:EE:C9:25:E3:E0:CD:DA:3A:E2:01:5C:E9:BF:2E:73:26:D4:1A:10
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 268A
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4e7JJePgzdo64gFc6b8ucybUGhA.roa
Signing time: Sat 14 Jun 2025 05:39:17 +0000
ROA not before: Sat 14 Jun 2025 05:39:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146845
IP address blocks: 2407:9b40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9866 (0x268a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jun 14 05:39:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E1EEC925E3E0CDDA3AE2015CE9BF2E7326D41A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:04:25:2a:c6:1b:f3:bf:53:a5:28:b8:98:
4a:6c:65:33:86:dd:05:90:02:b9:55:b1:94:a3:65:
db:7a:31:e3:85:1c:c7:8b:25:03:ce:d3:d7:4b:1d:
81:85:86:16:18:76:96:f8:06:02:22:66:9a:c7:32:
1c:2e:ea:6d:a4:ba:11:79:00:31:09:58:10:71:39:
7e:91:6e:77:8d:98:50:b6:69:10:da:98:24:75:60:
72:0e:f9:c1:90:91:d0:26:7f:71:45:96:99:4d:4d:
2b:ae:8b:51:46:32:f7:d7:2b:f4:40:ba:6c:75:dd:
e7:d0:41:99:3d:5a:22:6e:74:d6:5a:6f:12:58:cb:
5c:f9:17:ba:85:d9:5e:62:bf:51:37:5b:af:63:88:
3f:fc:5a:74:43:82:f5:a7:62:9d:4d:0c:2f:a6:a2:
0a:96:23:83:e5:ba:3d:f0:3e:7d:01:ca:df:b9:56:
8e:f8:ac:7e:6a:64:7e:1c:2e:f8:cf:a5:d2:3d:18:
0f:78:ab:35:fa:ba:5e:ce:3f:e4:48:46:fa:9f:71:
72:af:3d:1e:42:c4:90:e1:11:69:f6:62:97:85:26:
c9:6f:fe:b7:69:c0:f9:87:8c:bf:1b:95:70:6a:ce:
7a:eb:1d:9f:bb:13:30:37:7e:ab:a0:3a:a0:c4:e1:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:C9:25:E3:E0:CD:DA:3A:E2:01:5C:E9:BF:2E:73:26:D4:1A:10
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/4e7JJePgzdo64gFc6b8ucybUGhA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
27:e6:09:1b:04:13:80:f5:ca:ca:f9:bd:b3:5f:39:c2:28:d6:
49:12:74:9e:2e:bb:6d:cf:bb:7d:38:3e:6c:bb:ab:c0:cf:10:
48:17:90:3f:2c:65:81:7f:aa:9c:4d:ae:ba:18:97:88:40:bb:
26:2c:db:75:35:33:9a:a3:21:1d:6a:23:7f:54:af:41:bf:be:
11:3f:e6:ef:55:74:17:31:09:2d:05:5b:06:eb:30:3c:8e:26:
12:44:bd:e4:2f:95:0f:23:b6:dd:91:dc:d9:e3:61:fb:4c:92:
c5:f1:75:8e:06:5d:42:00:df:06:af:15:83:59:b1:a1:d4:42:
4d:9c:05:7f:e9:7e:53:67:ec:e1:76:d3:3c:49:ac:ea:73:ba:
b0:f7:db:00:fb:0b:45:6f:eb:0c:ec:c9:7e:2b:ca:bd:5e:ac:
5d:3d:3a:ba:d5:66:9f:99:24:2f:05:8c:d7:29:d7:de:97:6e:
a3:ee:c6:c3:60:7f:60:d7:62:89:58:bb:b9:51:c4:85:d1:28:
16:64:8a:93:e6:3c:3a:df:f7:8a:50:8c:77:2c:ff:c5:d8:9e:
3d:db:3e:02:69:9c:9d:25:76:ba:96:37:e6:55:29:d4:51:5b:
4f:5d:26:5c:36:05:87:78:d3:91:6c:1d:66:f2:04:83:e7:e6:
23:17:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:04:33 2025 by rpki-client